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BSPR: 

Upon receiving the request, the inside tunneling application also may be 
required to verify that the request is to a currently valid trusted 
socket and disallow the request if it is not. If the request is to a 
currently valid trusted socket, the inside tunneling application 
generates (or "spawns") an inside process associated with the request. 
Then the inside tunneling application: (a) generates connections between 
the inside resource associated with the port and host identity of the 
"requested" trusted socket entry and the inside interface server; and 
(b) communicating over the control connection with the outside tunneling 
application and a computer controlling the firewall itself, generates a 
connection through the firewall between the tasks generated/spawned on 
both the inside and outside interface servers. The connections 
generated/spawned by the inside and outside tunneling applications are 
separate from the control connection, and useful to carry data (usually 
in packet format defined by the trusted socket protocol) bidirect ionally 
between the outside object that originated the request and the inside 
object targeted by the request. 



CCOR: 
713/201 

CCXR: 
380/25 




Result Set j Show S Numbers Edits Numbers Referring Patents \ 



Previous Dosumen 



Full Title Citation Front Review Classification 



Next Document 



1 of 1 



2/13/00 11:22 AM 



West 1.2 Web Refine Search 



http://jupiter: 88/bin/gate.exe^jt c 1 &st. . ,rch=Refine+Search:&p_u_concpiece^p 1 9-p75 



Help 



Logout 



Main Menu Search Form Posting Counts 



ShowS Numbers 



Edits Numbers 



Search Results- 
Terms 



Documents 



il8 and control$4 nearl firewall: 



Database:! US Patents Full-Text Database 



\ 18 and control$4 nearl firewall 



Refine Search: 



Search History 



DB Name 


Ouerv 


Hit Count Set Na 


USPT 


18 and control$4 nearl firewall 


7 


L23 


USPT 


18 and control$4 near3 firewall 


22 


L22 


USPT 


120 and control$4 near3 firewall 


0 


L21 


USPT 


117 and detect$3 nearl time 


7 


L20 


USPT 


117 and detect$3 near2 time 


13 


L19 


USPT 


117 and detect$3 near2 overtime 


0 


L18 


USPT 


114 and security 


68 


L17 


USPT 


115 and control$4 nearl device 


2 


L16 


USPT 


114 and over nearl time 


17 


LI 5 


USPT 


18 and detect$3 nearl packet$ 


214 


L14 


USPT 


110 and detect$3 near3 packets 


0 


L13 


USPT 


110 and detecting near3 packets 


0 


L12 


USPT 


110 and detecting near3 patterns 


0 


Lll 


USPT 


18 and control$4 near3 firewall 


22 


L10 


USPT 


18 and simultaneously nearl control$4 near3 firewall 


0 


L9 


USPT 


15 or 16 or 17 


81390 


L8 


USPT 


(340/$).ccls. 


71599 


L7 


USPT 


(380/$).ccls. 


5495 


L6 


USPT 


(713/$).ccls. 


6227 


L5 



1 of 2 



2/13/00 11:25 AM 



West 1.2 Web Refine Search 



http://jupiter:88/bin/gate.exe?£^v) 1 &st. . .rch=Refine+Search:&p_u_concpiece=p 1 9-p75 



USPT (713/$).ccls. 6227 L5 

USPT 11 and controller near3 device 2 L4 

USPT 11 and controller near3 device near3 control$4 near2 firewall 0 L3 

USPT 11 and controller nearl device nearl control$4 near2 firewall 0 L2 

USPT security near3 firewall 103 LJ_ 



2 of 2 



2/13/00 11:25 AM 



Record Display Form 



http://jupiter:88/bijto^ 



| Help j j Logout 



Main Menu Search Form Result Set j Show S Numbers Edit S Numbers Referring Patents j 



Previous Document 



Next Document 



Full 1 Titl e ] C rtatio r7[ Fro nt | R eview } C lass if icatio n ] Date | Reference 1 Claims]} KVolC 



D 



Document Number 6 

Entry 6 of 7 



File: USPT 



Apr 20, 1999 



DOCUMENT- IDENTIFIER: US 5896499 A 
TITLE : Embedded security processor 



DEPR: 

User authentication information 140, initial firewall configuration 150, 
and firewall monitoring program 160 are all stored in main memory 130. 
User authentication program 140, initial firewall configuration 150, and 
firewall monitoring program 160 are all examples of firewall control 
programs and are executed by main processor 110 to control the activity 
of embedded security processor 173 . 

CLPR: 

9 . The apparatus of claim 8 wherein the firewall control program 
comprises a user authentication program. 

CLPR: 

10. The apparatus of claim 8 wherein the firewall control program 
comprises an initial firewall configuration program. 

CLPR: 

12 . The apparatus of claim 8 wherein the firewall control program 
comprises a firewall monitoring program. 

CLPR: 

16 . The method of claim 15 wherein the at least one fi rewall control 
program is a user authentication program. 

CLPR: 



program is an initial firewall configuration program. 
CLPR: 

18 . The method of claim 15 wherein the at least o 
program is a firewall monitoring program. 

CLPR: 

32. The method of claim 31 wherein the at least o 
program is a user authentication program. 

CLPR: 

33. The method of claim 31 wherein the at least o 



CLPR: 

34 . The method of claim 32 wherein the at least c 
program is a firewall monitoring program. 

CLPV: 

a memory coupled to the processor, the memory containing at least one 
firewall control program, the processor executing the at least one 
firewall control program to control access between the first and second 
networks . 
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providing a memory coupled to the processor, the memory containing at 
least one firewall control program; and 

CLPV: 

the processor executing the at least one firewall control program to 
control access between the first and second networks. 

CLPV : 

the processor disabling the embedded security processor if the at least 
one firewall control program detects an activity by the embedded 
security processor designated as an undesired activity by the at least 
one firewall control program. 



the processor disabling the embedded security processor if the at least 
one firewall control program detects an unauthorized attempt by one of 
the first and second networks to access the other network. 

CLPV: 

providing a memory coupled to the processor, the memory containing at 
least one firewall control program; and 



the processor executing the at least one firewall control program to 
control access between the first and second networks. 

CLPV: 

the processor disabling the embedded security processor if the at least 
one firewall control program detects an activity by the embedded 
security processor designated as an undesired activity by the at least 
one firewall control program. 



the processor disabling the embedded security processor if the at least 
one firewall control program detects an unauthorized attempt by one of 
the first and second networks to access the other network. 
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